Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File:                     3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier:          /rPfe+YP11scF0zVMYd5cFei0/ogZ4m1uGokTsVFWRE=
Subject key identifier:   26:DA:A6:B8:42:A1:1D:C8:A3:86:B2:E4:15:1E:87:04:04:4C:59:00
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer:       /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial:       0199589F1F03605B514914C1BB25E0B410F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number:          0FEB
Signing time:             Wed 17 Sep 2025 17:00:47 +0000
Manifest this update:     Wed 17 Sep 2025 17:00:47 +0000
Manifest next update:     Thu 18 Sep 2025 17:00:47 +0000
Files and hashes:         1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: Yg2MzzU/yLlsS0D5jxLa6fx1W47LmOtc+3QgY/zUyGI=)
                          2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
                          3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
                          4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
                          5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Sep 2025 15:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:58:9f:1f:03:60:5b:51:49:14:c1:bb:25:e0:b4:10:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
        Validity
            Not Before: Sep 17 17:00:47 2025 GMT
            Not After : Sep 18 17:00:47 2025 GMT
        Subject: CN=26daa6b842a11dc8a386b2e4151e8704044c5900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:f5:17:48:a7:cc:7b:52:7c:66:3d:a8:61:
                    d8:af:f8:7c:66:bc:a9:f2:69:4d:c9:e1:53:7c:a0:
                    9a:b2:d6:a3:9f:9a:d2:4e:97:d2:d7:e1:e9:aa:3f:
                    0c:eb:18:9d:96:d2:d0:31:68:5c:76:f6:99:f7:2f:
                    d8:a4:9d:71:c8:4f:e8:1e:6c:d7:61:a0:76:e5:78:
                    d7:c0:ae:a2:78:d5:d3:05:cc:df:70:2f:47:d6:a2:
                    d3:1e:aa:77:06:bb:ce:a7:ee:3a:57:ad:e7:77:73:
                    94:47:02:8d:7b:bb:33:ad:b1:30:f9:34:57:1d:8e:
                    53:4a:24:cc:d6:a2:c2:41:2d:8a:3d:0a:96:e8:c8:
                    69:39:be:32:f0:db:dc:2e:3f:3d:7f:7f:2e:c3:3e:
                    82:2d:df:2d:2e:94:d7:6a:87:7d:0e:eb:fc:14:16:
                    4c:ee:e7:10:00:3d:63:15:d0:d2:57:28:aa:86:49:
                    92:97:a5:ec:f3:0a:31:5c:d4:4a:83:17:a1:c8:ab:
                    72:95:6f:5d:61:2f:84:59:3e:52:75:b4:8f:f5:b1:
                    2b:94:62:44:45:2d:67:e7:1a:3d:50:1b:c4:7e:b3:
                    1e:10:c4:ac:12:6a:ca:b2:85:c2:59:d1:8d:1a:56:
                    07:ee:77:6a:f4:44:f9:4c:09:e6:18:76:1e:f4:c0:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DA:A6:B8:42:A1:1D:C8:A3:86:B2:E4:15:1E:87:04:04:4C:59:00
            X509v3 Authority Key Identifier:
                keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:42:a1:9c:c2:98:9e:9f:1a:9d:11:ff:90:12:7e:f6:32:d1:
         24:a1:a3:a7:63:f9:bc:c1:82:23:59:35:11:2c:98:77:ed:d0:
         99:4b:8d:8b:bc:c3:a4:04:00:b8:a5:98:70:cf:b5:99:90:85:
         7a:bb:1b:7c:bc:9f:39:1f:13:ae:d5:2a:d6:e4:5f:bf:7f:c8:
         f2:b2:a9:67:d1:20:3a:d7:13:b3:1a:7c:c2:42:5e:fa:53:e3:
         f4:d8:f0:0a:ad:cf:b6:ab:f7:d5:4e:7b:9f:da:26:73:24:f9:
         75:22:64:43:99:d6:67:94:3e:44:9c:01:20:d9:35:6c:79:c5:
         9c:77:d6:c9:0d:3d:e1:41:95:f3:c5:0e:84:44:1d:0f:59:3b:
         d1:af:02:b5:28:38:38:4b:3a:e5:86:8f:26:ae:51:89:d0:fd:
         32:f6:7d:5e:d8:f6:fd:92:67:6b:fe:e8:f2:59:90:a5:4f:e4:
         14:a5:83:89:70:bf:26:28:26:dd:d0:61:d4:ec:3b:09:b3:dd:
         af:1a:af:56:1c:69:be:11:e2:27:51:e3:05:d3:a9:d1:b8:e8:
         08:ad:e5:ad:3c:0f:25:23:7a:e9:5c:58:99:d7:aa:20:f8:ad:
         cf:4a:54:73:97:76:f5:38:15:2a:f1:93:f5:56:72:47:18:c8:
         40:9f:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:51:42 2025 by rpki-client